Touch-Screen Authentication Security via Fingerprint Obfuscation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Touch-sensitive screens used for authentication code entry are vulnerable to fingerprint residue, allowing unauthorized access as fingerprints can be used to identify or narrow down PIN code digits.

Innovation Solution

Implementing methods that distort or obfuscate existing fingerprints, add additional fingerprints, or provide a graphical interface where fingerprints do not have a discernable association with virtual key locations, including instructions for users to interact with the screen in specific ways to distort or add marks, such as swiping or touching virtual keys in predetermined patterns.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a touch-sensitive screen is used for authentication code entry, then the device modernity and ease of operation are improved, but security is worsened due to fingerprint residue enabling unauthorized access

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent converts the harmful fingerprint residue into a beneficial security feature by detecting and analyzing the unique touch patterns, pressure distributions, and temporal characteristics of legitimate users. This transforms the previously exploitable fingerprint marks into a biometric authentication mechanism that distinguishes authorized users from unauthorized ones, thereby converting the security vulnerability into a security strength.

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

Solution Approach 2:

The patent introduces an intermediary layer of touch pattern analysis between the physical touch and the authentication code entry. This intermediary mechanism analyzes intermediate parameters such as touch duration, pressure distribution, swipe patterns, and temporal sequences to verify user identity, thereby preventing direct exploitation of fingerprint residue while maintaining the convenience of touch-based interaction.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If traditional virtual keypads are used, then ease of operation is improved, but security is worsened as fingerprints can identify or narrow down PIN code digits

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces the traditional mechanical assumption that touch location alone identifies the pressed key with a more sophisticated system that measures multiple physical parameters simultaneously. By substituting simple location-based recognition with multi-parameter analysis including pressure, duration, velocity, and temporal patterns, the system maintains ease of operation while eliminating the security vulnerability of fingerprint-based key identification.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent changes the parameters used for key identification from solely spatial coordinates to a comprehensive set of parameters including touch pressure, contact duration, swipe velocity, acceleration patterns, and temporal sequences. This parameter expansion transforms the authentication process from vulnerable location-based recognition to robust multi-dimensional pattern matching that preserves user convenience while ensuring security.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS10409406B2Systems and methods for increased security in authentication code entry for touch-sensitive screen enabled devices
Publication Date: 2019.09.10 VERIFONE INC
  • US10409406B2 patent drawing
  • US10409406B2 patent drawing
  • US10409406B2 patent drawing

AI summary

Systems and methods for increased security in authentication code entry for touch-sensitive screen enabled devices are disclosed. According to one embodiment, a method for enhanced security in entering data to a data entry device comprising at least one computer processor and a touch-sensitive screen may include (1) the touch-sensitive screen displaying a touch instruction, the instruction indicating a touch location where a user touch is to be made on the touch-sensitive screen; (2) the touch-sensitive screen sensing a first touch; and (3) the at least one computer processor determining that the first touch is within a predetermined threshold of the touch location indicated by the touch instruction.